Monitoring£50 / month · Poland: 199 PLN
Monthly vulnerability scan, uptime monitoring, alerts on components in use, security updates, backup checks, monthly summary. No content changes.
SECURITY REVIEW / UK & POLAND
A functional test confirms a customer can download their invoice. A security review checks they can't download someone else's. You get a concrete plan: what we checked, what to fix first and what to hand to your developer.
Testing starts only after written authorisation from the system owner.
GDPR (UK GDPR in the UK) requires regular testing, assessment and evaluation of security measures. Outsourcing IT does not remove this duty from the data controller — it pays to have evidence of when and what was checked and which issues were fixed. A reportable breach generally has to be notified to the regulator within 72 hours.
One simple website or small web app, one domain, one environment; we confirm fit before you order.
Not included (quoted separately): fixes, source-code review, test restore of backups, full penetration tests, complex platforms. We are not VAT-registered — no VAT is added to these prices.
Monthly vulnerability scan, uptime monitoring, alerts on components in use, security updates, backup checks, monthly summary. No content changes.
Everything in Monitoring + 1 hour a month for small content changes and fixes + quarterly analytics recommendations.
Everything in Monitoring + 2 specialist hours a month (fixes, advice, recovery help) + critical issues picked up within 4 business hours in agreed support hours.
Billed monthly, 30 days' notice, no minimum term. Annual option: 2 months free. Unused hours do not roll over. Prices cover one simple website or small app; larger systems are quoted separately. 4 hours is the time to start handling, not a promise to fix every outage; plans are not 24/7 support or unlimited fixes.
Finds potential weaknesses such as known component or configuration issues. Tool output requires specialist assessment.
Tests in controlled conditions whether a weakness can be exploited and with what impact — always within an agreed scope.
Examines how the application is built, including access control, data handling and authentication.
The basic review is not a full penetration test, a statutory NIS2/KSC audit or a GDPR compliance assessment. If you have a quote for an “audit” and aren't sure what it covers, we'll help you assess it.
We confirm scope, timing and price. Before any work starts we sign the system owner's written authorisation, an NDA and a contract with a liability cap, and agree the test approach and how critical findings are handled.
Specialists use tools; AI supports analysis, but a finding enters the report only after specialist verification. We never send passwords, keys or customer databases to AI models.
Priorities, impact, recommendations and a 30-minute conversation.
We verify reported fixes within 30 days.
Extra paid work starts only after your approval.
Share your public website address or a short description of your app and market (UK / Poland / both). You do not need to know test names — we will confirm scope, price and timing before you order. Do not send passwords, customer data or confidential files.
Sending this enquiry is not an order. We first confirm the scope, price and timing in writing.